From 2efbdf7b8fcf79f3fa8a6471d2eca00df0c91108 Mon Sep 17 00:00:00 2001 From: Florian Westphal Date: Wed, 9 May 2018 12:18:20 +0200 Subject: tests: py: allow to specify sets with a timeout Not usable yet, as the set timeout netlink output isn't captured so far, but it adds groundwork to add this as a follow-up. Set definition syntax changes a little, if you want to add multiple elements they now have to be separated by "," just like in nftables. Signed-off-by: Florian Westphal --- tests/py/inet/sets.t.payload.bridge | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 tests/py/inet/sets.t.payload.bridge (limited to 'tests/py/inet/sets.t.payload.bridge') diff --git a/tests/py/inet/sets.t.payload.bridge b/tests/py/inet/sets.t.payload.bridge new file mode 100644 index 00000000..6f21f827 --- /dev/null +++ b/tests/py/inet/sets.t.payload.bridge @@ -0,0 +1,15 @@ +# ip saddr @set1 drop +bridge test-inet input + [ payload load 2b @ link header + 12 => reg 1 ] + [ cmp eq reg 1 0x00000008 ] + [ payload load 4b @ network header + 12 => reg 1 ] + [ lookup reg 1 set set1 ] + [ immediate reg 0 drop ] + +# ip6 daddr != @set2 accept +bridge test-inet input + [ payload load 2b @ link header + 12 => reg 1 ] + [ cmp eq reg 1 0x0000dd86 ] + [ payload load 16b @ network header + 24 => reg 1 ] + [ lookup reg 1 set set2 0x1 ] + [ immediate reg 0 accept ] -- cgit v1.2.3